Phone lost or stolen: What to do immediately to protect UPI, Aadhaar and PAN

Representative image

• Block your SIM card immediately to prevent OTP and UPI misuse
• Use Find My Device to lock or erase your phone remotely
• Inform your bank, block UPI, and secure email and Aadhaar services

Did our AI summary help?

The moment you realise your phone is lost or stolen, assume it is in the wrong hands. Even if your screen is locked, a phone today is a gateway to UPI apps, bank alerts, email, cloud backups, Aadhaar-linked services and OTPs. Waiting to “see if it turns up” is the biggest mistake people make.

Step one: Block your SIM card immediately

Call your mobile operator or log in through another device and suspend the SIM. This cuts off OTPs, UPI verification messages and bank alerts. Without this step, nothing else you do fully works. Ask for a replacement SIM with the same number.

Step two: Use “Find My Device” and lock the phone

If you use Android, sign in to Google’s Find My Device. If you use an iPhone, use Find My iPhone. Lock the phone remotely and display a message with an alternate contact number. If the location looks suspicious or unreachable, remotely erase the phone. Data loss hurts less than identity theft.

Step three: Block UPI across all apps

Call your bank’s customer care and ask for a temporary UPI block, not just an app-level logout. Also email the bank so there is a written record. If you use multiple apps like Google Pay, PhonePe or Paytm, log into each from another device and revoke access. Do not rely only on uninstalling apps remotely.

Step four: Inform your bank and freeze risky access

Tell your primary bank that your phone is lost. Ask them to disable mobile banking, reset transaction limits and monitor unusual activity. If your SMS alerts were coming to that phone, ask for email alerts as a backup until the SIM is restored.

Step five: Secure your email first, not last

Your email is the master key. Change your email password immediately and enable two-factor authentication using a new device. Once email is compromised, attackers can reset banking apps, cloud storage and even Aadhaar-linked services.

Step six: Lock down Aadhaar services

Log in to the UIDAI portal and lock your Aadhaar biometrics. This prevents misuse of fingerprint or iris authentication. Also check recent authentication history. If anything looks off, report it immediately.

Step seven: Protect PAN-linked misuse

PAN misuse usually shows up later through loans, credit cards or fake accounts. Place a watch with credit bureaus so any new credit enquiry triggers an alert. If you spot something unfamiliar, file a complaint early. Delay makes clean-up harder.

Step eight: File a police complaint and keep proof

File an FIR or online complaint mentioning the phone number, IMEI and time of loss. Banks and regulators often ask for this if fraud occurs later. Keep screenshots of emails, complaint numbers and call logs.

What to do once the panic settles

When you get your replacement SIM, reset all banking, UPI and email passwords again. Review app permissions, remove unused financial apps and enable app-level locks. Treat this as a forced digital clean-up.

FAQs

Can someone misuse my UPI if my phone is locked?

Yes, especially if the SIM is active. Some attacks rely on OTP interception, app notifications or previously logged-in sessions. Blocking the SIM and UPI together is critical.

Should I block Aadhaar even if my phone had only a PDF copy?

Yes. Many services rely on OTP or biometric authentication linked to your number. Locking biometrics adds a strong extra layer of protection.

Is filing a police complaint really necessary?

Yes. Even if no money is lost immediately, an FIR helps if fraud shows up weeks or months later. It establishes a timeline and protects you legally.